Be sure you have admin rights and under the old filemanager (not explorer) you go to the menu item security ... permissions
You either add (if you want to restrict the web anonymous user) or edit one of the list items on the next screen click show users...then
scroll down the list and click on the user who is the anonymous web user...
Change their type of access to read click ok and voila its done... now you can get more complicated for others but that is the simple way...
Be careful about assiging directory permissions you can spend a lot of time trying to figure out why you can either run (execute) or read a file on the web so use it only when you feel comfortable.
IIS uses the NT file permissions (hence the greatness of IIS) to give permissions to users... you can create user accounts on the system, restrict the file access to that file only and voila you can have people accessing with passwords (be careful with this one unencrypted passwords are a little dangerous use NT/Challenge!!).
